Amazon Managed Workflows for Apache Airflow (MWAA) now includes fine‑grained access control. The feature uses IAM Identity Center so users log in with their corporate credentials and permissions are checked per request. Admins can restrict actions on specific DAGs, connections, variables, pools and other resources. A new multi‑team mode lets several groups share one MWAA environment, each with its own DAG folder in S3, and visibility is limited by IAM Identity Center group membership. The capabilities are live in every AWS region where MWAA runs.
Why it matters
Teams can share Airflow infrastructure while keeping their pipelines and data isolated, reducing costs and simplifying admin overhead.
